$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft File: P7eFXvMwunfZ87ct_97CBxKsFAc.mft (raw, json) Hash identifier: q1R7LwGa7w2CeCcIVDyZpPIHuAzJwSvF37KPfX50q6w= Subject key identifier: 68:99:FB:E7:7C:FE:15:61:6F:51:17:00:62:65:BC:79:92:BA:49:AA Authority key identifier: 3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07 Certificate issuer: /CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407 Certificate serial: 17EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft Manifest number: 17D6 Signing time: Sun 24 Aug 2025 16:33:07 +0000 Manifest this update: Sun 24 Aug 2025 16:33:07 +0000 Manifest next update: Sun 31 Aug 2025 16:33:07 +0000 Files and hashes: 1: P7eFXvMwunfZ87ct_97CBxKsFAc.crl (hash: ri1WFCsl9NoHTOVJfZCozZbViHtrDRkd/9RZ6CV5s88=) 2: BA140DB6707911F0A8415023C4F9AE02.roa (hash: 0YUnRIrkM+IzlTQK8voAM6732+ON45hB2hg7JmdBo3U=) 3: D9C4471C32D911F0B3466E0BC4F9AE02.roa (hash: kEqVolPWbZYybXeWnS2WqFsHodl52XHMAsJNtlbgCXo=) 4: 9BAC2C9C32D911F09D7CBD0AC4F9AE02.roa (hash: WA77dp8CFAMTuFtYEp44sxYc2n+DFG5Sigw0CHNE2Bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6127 (0x17ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD4DB, serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407 Validity Not Before: Aug 24 16:33:07 2025 GMT Not After : Aug 31 16:33:07 2025 GMT Subject: CN=68ab3ec3-aa61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:83:52:09:25:23:48:55:a9:04:93:70:41:dd: ff:c4:62:74:20:f6:4f:f4:0a:58:49:5f:3e:02:2a: 70:37:72:20:a2:34:9a:3e:16:c2:1a:b8:29:4b:15: 61:09:f3:da:fa:75:6a:8a:97:96:52:57:71:54:22: 09:73:f7:a1:57:ee:2e:2c:e5:3f:09:22:cf:4d:98: e4:f5:0c:14:db:30:98:d5:33:9c:b9:07:05:3b:18: eb:aa:f5:e8:83:bc:6d:76:9a:72:9e:d1:48:83:14: 78:cd:5d:0c:35:f1:7f:ce:ee:f6:70:71:46:eb:6e: 84:00:2e:c9:b1:97:8b:fb:68:9c:f7:cc:c8:56:40: 39:3b:bc:e8:d1:12:97:a1:c1:2f:cf:ea:10:dd:18: 84:89:83:54:7b:06:a7:79:5e:e6:30:c4:2c:ab:c3: fe:51:d9:52:2f:38:84:27:81:4a:ec:63:62:3f:43: ba:be:21:4a:69:38:75:b1:6b:50:73:3f:7a:92:23: 42:4d:e8:b6:32:18:10:45:d8:3a:b5:5b:18:a0:b2: 7d:b3:19:d2:18:eb:9d:5e:a3:c2:51:f9:7e:14:9b: 78:6b:2b:2a:f1:b0:cd:ff:95:77:ac:65:fc:90:ec: f6:ec:b1:22:1d:9c:72:4c:43:10:de:ca:df:ea:d7: 79:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:99:FB:E7:7C:FE:15:61:6F:51:17:00:62:65:BC:79:92:BA:49:AA X509v3 Authority Key Identifier: keyid:3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:38:b8:e8:fc:79:53:af:1e:fd:83:6a:97:86:bc:43:6c:a9: 3f:bd:d5:d7:50:73:3c:eb:bf:19:c1:ae:e6:d0:25:f2:46:bc: d3:8b:c5:2a:1c:d0:06:dd:99:1b:b4:08:7a:1d:a6:e0:e0:f0: e9:d7:a5:25:24:0a:1c:f6:f7:6e:02:a6:28:b1:47:5b:be:f8: 97:40:45:6d:c5:0c:b9:e5:ec:d1:e7:61:0c:4f:c5:27:4d:ef: 81:a5:a5:1b:58:52:c9:36:e0:f6:b8:57:cf:75:a2:3b:fc:e1: 2e:1b:25:cc:58:17:aa:c6:d1:f2:32:6b:d4:82:9b:71:4a:93: 63:1e:34:ac:53:7f:38:87:cb:01:f6:0d:8d:48:14:cb:f4:6a: 3a:df:3c:20:a1:ba:2b:c3:4e:53:9d:77:36:56:6c:bc:8a:a7: 64:e6:f4:4c:9a:e8:ca:c8:cc:1c:c2:80:9f:85:9a:9d:90:3b: 80:8a:5f:7c:e8:c1:b8:ac:bc:30:24:6e:dc:44:fb:00:38:6d: 2d:fd:82:72:d8:0f:25:cf:ac:17:86:d1:f9:6f:1a:04:32:ed: f5:14:b2:9b:4a:57:26:2a:3c:ea:97:09:c6:8e:73:8b:bc:01: 30:60:85:45:62:b7:3a:aa:d9:d0:e2:01:09:cf:1e:80:06:f0: 91:af:b8:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q0REIxMTAvBgNVBAUTKDNGQjc4NTVFRjMzMEJBNzdEOUYzQjcyREZGREVDMjA3 MTJBQzE0MDcwHhcNMjUwODI0MTYzMzA3WhcNMjUwODMxMTYzMzA3WjAYMRYwFAYD VQQDEw02OGFiM2VjMy1hYTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4INSCSUjSFWpBJNwQd3/xGJ0IPZP9ApYSV8+AipwN3IgojSaPhbCGrgpSxVh CfPa+nVqipeWUldxVCIJc/ehV+4uLOU/CSLPTZjk9QwU2zCY1TOcuQcFOxjrqvXo g7xtdppyntFIgxR4zV0MNfF/zu72cHFG626EAC7JsZeL+2ic98zIVkA5O7zo0RKX ocEvz+oQ3RiEiYNUewaneV7mMMQsq8P+UdlSLziEJ4FK7GNiP0O6viFKaTh1sWtQ cz96kiNCTei2MhgQRdg6tVsYoLJ9sxnSGOudXqPCUfl+FJt4aysq8bDN/5V3rGX8 kOz27LEiHZxyTEMQ3srf6td58wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiZ++d8 /hVhb1EXAGJlvHmSukmqMB8GA1UdIwQYMBaAFD+3hV7zMLp32fO3Lf/ewgcSrBQH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDREQi8zQTMxNURDRUNE MDIxMUU3QjA0NDJEMjhDNEY5QUUwMi9QN2VGWHZNd3VuZlo4N2N0Xzk3Q0J4S3NG QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3ZUZYdk13dW5mWjg3Y3RfOTdDQnhLc0ZBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDREQi8zQTMxNURDRUNEMDIxMUU3QjA0NDJEMjhDNEY5QUUwMi9QN2VGWHZNd3Vu Zlo4N2N0Xzk3Q0J4S3NGQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjOLjo/HlTrx79g2qXhrxDbKk/vdXXUHM8678Zwa7m0CXyRrzTi8Uq HNAG3ZkbtAh6Habg4PDp16UlJAoc9vduAqYosUdbvviXQEVtxQy55ezR52EMT8Un Te+BpaUbWFLJNuD2uFfPdaI7/OEuGyXMWBeqxtHyMmvUgptxSpNjHjSsU384h8sB 9g2NSBTL9Go63zwgoborw05TnXc2Vmy8iqdk5vRMmujKyMwcwoCfhZqdkDuAil98 6MG4rLwwJG7cRPsAOG0t/YJy2A8lz6wXhtH5bxoEMu31FLKbSlcmKjzqlwnGjnOL vAEwYIVFYrc6qtnQ4gEJzx6ABvCRr7hC -----END CERTIFICATE-----Generated at Sun Aug 24 22:00:31 2025 by rpki-client